feat(auth): separate environment administration permissions - #9786

Open

juliusmarminge wants to merge 39 commits into

t3code/auth-pairing-scopesfrom

t3code/auth-environment-scopes

Commits on Sep 5, 2026

feat(auth): separate environment administration scopes
juliusmarminge
committed
89b0d91
fix(web): explain maintenance permissions with tooltips
juliusmarminge
committed
1be8e08
fix(auth): respect independent environment grants in settings
juliusmarminge
committed
11778e3
fix(mobile): wait for grants before selecting shared settings
juliusmarminge
committed
519dfd5
fix(usage): require settings scope for model price edits
juliusmarminge
committed
0f6e229
fix(web): brand relay targets before checking scopes
juliusmarminge
committed
6ecbb1e
fix(settings): explain unavailable environment controls
juliusmarminge
committed
c75545a
fix(auth): preserve self-updates across scope migration
juliusmarminge
committed
55cf215
fix(web): preserve untouched script shortcuts on save
juliusmarminge
committed
3d5610b
fix(web): initialize shortcuts when adding scripts
juliusmarminge
committed
d1809b2
fix(web): allow relay unlink after link-state failure
juliusmarminge
committed
97fc24a
fix(web): sync shared settings before remote grants load
juliusmarminge
committed
c7c40a0
test(web): type failed shared settings grants
juliusmarminge
committed
80987e5
fix(web): resolve script shortcuts in the active environment
juliusmarminge
committed
b9e37df
fix(server): choose enabled instances for text generation
juliusmarminge
committed
218cb65
fix(web): preserve retained shortcuts when re-adding actions
juliusmarminge
committed
d950aaa
fix(server): preserve provider fallback tuple types
juliusmarminge
committed
3b55f5a
fix(server): keep effective provider fallback entries typed
juliusmarminge
committed
0d80cc4
fix(web): update settings controls when grants change
juliusmarminge
committed
eb95284
fix(mobile): respect relay access when changing Live Activities
juliusmarminge
committed
c54ff76
fix(web): gate project settings by checkout permissions
juliusmarminge
committed
ee34e7d
fix(web): recheck thread mutation permissions at dispatch
juliusmarminge
committed
4416ff7
fix(web): guard project settings command dispatch
juliusmarminge
committed
76bfecb
fix(mobile): gate new task submission by task permissions
juliusmarminge
committed
0d6eccb
fix(web): gate composer actions and uploads by thread permissions
juliusmarminge
committed
6c12d5f
fix(mobile): gate thread list mutations by task permissions
juliusmarminge
committed
8ec1545
fix(web): gate legacy sidebar project and thread actions
juliusmarminge
committed
a6e4f09
fix(mobile): gate task controls and queued delivery
juliusmarminge
committed
83b51e4
fix(web): respect scopes in editor and markdown actions
juliusmarminge
committed
4b3cdd0
fix(mobile): preserve queued tasks after access changes
juliusmarminge
committed
5d83ddc
docs: clarify grouped project permissions
juliusmarminge
committed
d09ac2b
test(web): keep task permission fixtures within their layer
juliusmarminge
committed
9a80e32
test(clients): correct permission fixture types
juliusmarminge
committed
5e93f3e
fix(web): report revoked settings access accurately
juliusmarminge
committed
cd9c9d2
test(web): omit unset project patch fields
juliusmarminge
committed
d511bd7
test(web): provide grants in legacy Markdown fixtures
juliusmarminge
committed
151f387
fix(web): preserve typed authorization failures
juliusmarminge
committed
3270705
fix(mobile): preserve typed authorization failures
juliusmarminge
committed
8a1df24
fix(web): gate onboarding imports by task permissions
juliusmarminge
committed
5d802e8